The risk score for this supernet indicates elevated risk at the aggregated network level. Higher scores reflect stronger signals identified across related subnets.
The supernet (116.90.0.0/16) exhibits suspicious behavior characterized by repetitive, low-interaction visits across multiple IPs, with a lack of legitimate RDNS and forward DNS matches. The presence of identical user agents and the potential for automated scraping or bot-like activity suggests coordinated stealth automation, raising concerns about analytics pollution and possible misuse of legitimate infrastructure.
The following signals are generated automatically and do not override the overall risk score shown above.